Description
Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portlet
Remediation
References
Related Vulnerabilities
OpenSSL Other Vulnerability (CVE-2003-0543)
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5382)
Envoy Proxy Use After Free Vulnerability (CVE-2023-35943)
MySQL CVE-2019-2784 Vulnerability (CVE-2019-2784)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-1941)